CDL User Permission Management

Scenario

Before using the CDL service, a cluster administrator needs to create a user and grant operation permissions to the user to meet service requirements.

CDL users are classified into administrators and common users. The default CDL user group for administrators and common users is cdladmin and cdl, respectively.

• Users associated with the cdladmin user group can perform any CDL operations.
• Users associated with the cdl user group can perform creation and query operations on CDL.

If Ranger authentication is enabled and you need to configure the creation, execution, query, or deletion permission for CDL users, see Adding a Ranger Access Permission Policy for CDL.

If Ranger authentication is manually disabled for a cluster, enable Ranger authentication by referring to Enabling Ranger Authentication for MRS Cluster Services.

This section applies only to clusters with Kerberos authentication enabled.

Procedure

1. Log in to FusionInsight Manager.
2. Choose System. On the navigation pane on the left, choose Permission > User and click Create.
3. Enter a username, for example, cdl_admin.
4. Set User Type to Human-Machine.
5. Set Password and confirm your password.
6. Set User Group and Primary Group.
   • CDL administrator permissions: Add the cdladmin user group and set it to the primary group.
   • Common CDL user permissions: Add the cdl user group and set it to the primary group.

7. Click OK.